I am using a script (one that I have created with fwbuilder) to set up my
iptables firewall. Since the device we are talking about is a notbook rather than a server in a quasi static network, I need to run the script whenever the interfaces change, e.g. because I switch wifi on and of.
How do I achieve that reliably way, such that my notebook does not stay unprotected, e.g. at boot time or during initialization of any of the interfaces.
How about placing a symlink to the script in
/etc/NetworkManager/dispatcher.d/pre-up.d/ (https://people.freedesktop.org/~lkundrak/nm-docs/NetworkManager.html). Does that make sense?